WO2009024092A1

WO2009024092A1 - Method and system for controlling the authorization of service resource

Info

Publication number: WO2009024092A1
Application number: PCT/CN2008/072083
Authority: WO
Inventors: Peng Wang; Baojian Qi; Xiaosong Lei
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-08-21
Filing date: 2008-08-21
Publication date: 2009-02-26
Also published as: EP2157744A4; US20100122281A1; EP2157744A1

Abstract

A method for controlling the authorization of service resource is provided. It includes that: P-CSCF receives the message comprising the available resource list information sent by SCF; P-CSCF acquires the available resource list information in the message and performs the authorization control to the resource request according to the available resource list information. A system and a device for realizing the service resource authorization control are also provided.

Description

Method and system for service resource authorization control

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method, system, and device for controlling traffic resource authorization. Background technique

IPTV (Internet Protocol Television) is a brand-new technology that uses broadband cable TV networks to provide a variety of interactive services, including digital TV, to home users in a variety of technologies, including Internet multimedia and communications. Users can enjoy IPTV services in two ways at home: computers, or network set-top boxes plus regular TV sets. IPTV is different from traditional analog cable TV and digital TV. Although digital TV has many technological innovations relative to analog TV, these technological innovations only change the signal without touching the way media content is transmitted.

IMS based IPTV (IMS-based IPTV) provides IPTV services under the overall architecture of IMS (IP Multimedia Subsystem) to take full advantage of the existing registration, authentication, routing, session control and establishment in the IMS network. Services such as service triggering, charging, and end-to-end QoS (Quality of Service) guarantee to provide users with streaming services and multimedia services that integrate streaming media and real-time session services. That is to say, the multimedia session of the user to the content is completed by the existing session control mechanism of the IMS. During the establishment of the session, the bearer resource needs to be reserved for the transmission of the media stream.

Currently, many standards organizations are researching IMS based IPTV. Figure 1 shows the service functional architecture of IMS based lPTV defined by the standard organization ETSI TISPAN (Telecommunications and Internet converged Services and Protocols for Advanced Networking).

The IPTV Service Control Function (SCF) controls the access of the user service, and the IPTV Media Function (MF) is responsible for providing control and delivery of the media stream to the user terminal (UE). Dividable It is IPTV Media Control Functions (MCF) and IPTV Media Delivery Functions (MDF). The media delivery function is usually a media server that transmits the media stream required by the user to the user terminal under the control of the media control function. The media control function can also receive and process user's playback control operations, such as fast forward, backward, pause, and locate operations of the media. This operation is usually implemented using Real Time Streaming Protocol (RTSP).

The IPTV UE service control uses the Gm interface between the IPTV UE and the Core IMS (the IMS core network), the Core IMS, and the ISC (IMS Service Control) interface between the Core IMS and the IPTV Service Control (SCF). The interface between the CSCF (Call Session Control Function) in the Core IMS is based on the SIP Initiation Protocol (Session Initiation Protocol).

The SIP protocol is an application layer control protocol that can be used to establish, modify, and terminate multimedia sessions (or conferences), such as Internet telephony. The SIP protocol also supports inviting participants to participate in existing sessions, such as multiparty conferences.

In IPTV, the Broadcast Service (BC) refers to an application that provides services to users through multicast, such as real-time TV (Live TV or Linear TV, LTV). In the multicast service, the user terminal (UE or STB) receives the broadcasted TV program information and displays the received program information to the user.

In the IMS network, the P-CSCF (Proxy-CSCF, Proxy Call Session Control Function), as the first service control entity of the terminal access core network, is also responsible for authorizing the user to use the access network resources and completing the QoS processing of the user. In the IPTV system, the same P-CSCF needs to join the multicast group to the user terminal or request to establish a unicast media channel for resource reservation and authorization.

In the IMS system, the S-CSCF (Serving-CSCF, Serving Call Session Control Function) checks the SDP 0/A (Session Description Protocol Offer/ Answer) interaction parameters, and checks the user data. It is confirmed that the user can establish a corresponding session and a bearer channel, and the P-CSCF obtains detailed parameter information (including the session double) of the session established by the user from the SDP O/A interaction in the session establishment process. The IP address, port, the transport layer protocol used, even the application layer protocol, the codec mode of the media stream, some or all of the required bandwidth, and the access authorization and resource reservation are completed based on the information.

When the service is deployed in the multicast mode, the P-CSCF or the access network (P-CSCF/access network) can locally store the multicast service identifiers and other specific parameters of the multicast service (including multicast) through configuration. The transmission protocol of the service content distribution, the multicast address and port, the encoding and decoding mode of the multicast service, and the related parameters required for the corresponding codec may also include the bandwidth requirement of the multicast service, the quality of the multicast service content, and the resolution. And the correspondence between the multicast service description information for displaying to the end user, when the P-CSCF no longer needs to rely on the SDP 0/A process between the UE and the SCF to transmit and acquire the session information and the user. The transfer of related resource authorization information such as a multicast group that can be joined. What is needed is that the SCF can transmit the multicast service information that the user can access to the P-CSCF through the signaling message in the process of session establishment or modification, and the localization by the P-CSCF and the access network and the local handover when the multicast service is switched. Resource authorization. The access network includes an access resource providing a sub-network and a resource access control sub-network.

If the correspondence between the multicast service and the multicast address is saved by the P-CSCF, the P-CSCF needs to authorize the UE to join the multicast group on a multicast-by-multicast address and port; if the multicast service and the multicast address are The correspondence between the two is not saved by the P-CSCF but by the access network. Then, the P-CSCF needs to authorize the multicast service, and the access network element performs authorization according to the multicast address and port corresponding to the multicast service. .

The BC service package currently exists in the IMS based IPTV related technical documents of the TISPAN standards organization and the technology for the UE to initiate a business process to the BC service package, as shown in Figure 2: The terminal requests access to a service packet, and the SCF confirms that the user can access all the multicast services in a package. When the service establishment process is completed, if the user performs a multicast service handover in a package, the P-CSCF can complete the authorization of the resource locally. The SIP message is processed by the entity that the message traverses, and is not end-to-end. For example, the INVITE is sent by the IPTV UE, and the P-CSCF and the S-CSCF process the packet and then forward it to the SCF (Service Control). Function, business control function). In the process of implementing the present invention, the inventors have found that the prior art has at least the following problems:

Although the authorization of a "package" can be done in one go through the prior art, the reliance on "package" greatly limits the flexibility of business deployment and contracting. Summary of the invention

The embodiments of the present invention provide a service resource authorization control method, system, and device, which implements authorization control of resources used by a user terminal in a flexible and convenient manner.

An embodiment of the present invention provides a method for service resource authorization control, including: a proxy call session control function entity receiving a message including a list of available resource information sent by a service control entity;

The proxy call session control function entity acquires the available resource list information carried in the message, and performs authorization control on the user terminal to use the resource according to the available resource list information.

The embodiment of the present invention further provides a system for implementing service resource authorization control, including a user terminal, a proxy call session control function entity, and a service control function entity, where the user terminal is configured to send a use network to the proxy call session control function entity. The request for the resource sends the capability information of the device to the service control function entity, so that the network side service control function entity selects the mode of sending the available resource list information. And the proxy call session control function entity is configured to perform authorization control on the request of the user terminal to use the network resource according to the available resource list information sent by the service control function entity;

The service control function entity is configured to receive a request for using a network resource from the user terminal, and send a message including the available resource list information to the proxy call session control function entity.

An embodiment of the present invention further provides a user terminal, configured to send a request for using a resource in a network to a network side, including:

a request sending module, configured to send a request for using a resource in the network to the proxy call session control function entity; The terminal capability sending module is configured to send the capability information of the device to the service control function entity, so that the network side service control function entity performs the selection of the available resource list information sending manner.

An embodiment of the present invention further provides a proxy call session control function entity, configured to perform service resource authorization control on a request of a user terminal, including:

a resource list obtaining module, configured to obtain information about available resources carried in a message sent by the service control function entity;

a resource list storage module, configured to store the available resource list information obtained by the resource list obtaining module;

The authorization control module is configured to perform authorization control on the request of the user terminal to use the access network resource according to the available resource list information stored by the resource list storage module.

The embodiment of the present invention further provides a service control function entity, configured to send the available resource list information to the proxy call session control function entity to perform authorization control of the service, including:

a terminal resource list obtaining module, configured to acquire information about available resources of the user terminal;

And a resource list sending module, configured to send the available resource list information acquired by the terminal resource list obtaining module to the proxy call session control function entity.

Compared with the prior art, the embodiment of the present invention has at least the following advantages: the available resource list information is sent by the service control function entity to the proxy call session control function entity, and the proxy call session control function entity according to the available resource list information Authorize control of available resources of users to speed up service switching without affecting the flexibility of users to select service lists that they can access, which can greatly enhance the availability of services and improve the user experience and experience. DRAWINGS

1 is a service function architecture diagram of an IMS based lPTV in the prior art; FIG. 2 is a flowchart of authorization control by using a package in the prior art; FIG. 3 is a flowchart of a service resource authorization control method according to Embodiment 1 of the present invention; ; 4 is a flowchart of a service resource authorization control method according to Embodiment 2 of the present invention; FIG. 5 is a flowchart of a service resource authorization control method according to Embodiment 3 of the present invention; FIG. 6 is a service resource authorization control method according to Embodiment 4 of the present invention; FIG. 7 is a schematic structural diagram of a system for implementing service resource authorization control according to an embodiment of the present invention. detailed description

The specific embodiments of the present invention are further described in detail below with reference to the accompanying drawings and embodiments.

In the first embodiment of the present invention, a flow of a service resource authorization control method is shown in FIG. 3, and includes the following steps:

Step s301: The SCF (Service Control Entity) sends a message including the available resource list information to the P-CSCF (Proxy Call Session Control Function Entity).

The available resource list information is the information of the user-customized service, and the SCF may obtain the user's available resource list information from the entity that stores the service profile of the UE in advance, such as from the UPSF (User Profile Service Function) entity. Obtained on. In the manner of acquisition, it can be acquired by the SCF periodically or in real time every time it needs to be sent to the P-CSCF.

The message including the available resource list information may be in the following specific form: a response message sent to the P-CSCF when the SCF receives the service access request message or the service modified request message sent by the UE; or sends the service establishment to the UE for the SCF. The request message when the request or the service is modified; or the notification message returned by the SCF to the P-CSCF after receiving the subscription message sent by the P-CSCF. The SCF may send a list of available resources of the user terminal in the above messages to implement the P-CSCF to obtain the available resource list. In the specific sending manner, the sent address (link address) of the available resource list may be carried in the sent message including the available resource list information, and the P-CSCF obtains the available resource list according to the access address for authorization control of the service resource. Or carrying the complete content of the available resource list in the sent message including the available resource list information, and the P-CSCF can use the available resource list for the authorization control of the service resource. In step s302, the P-CSCF performs authorization control on the request of the user terminal to use the resource according to the available resource list information carried in the message including the available resource list information.

The message received by the P-CSCF includes the available resource list information. If the access address of the available resource list is carried, the P-CSCF needs to obtain a list of available resources according to the access address; if the message including the available resource list information carries the complete list of available resources The content, the P-CSCF may perform an access authorization or an access rejection on the request of the user terminal to access the resource according to the information in the available resource list. The method for representing the service in the information including the available resource list information includes the following methods: including at least one service identifier and/or specific parameters of the service; or including at least one service identifier; or including at least one service package, each service The package includes at least one service identifier and/or specific parameters of the service; or includes at least one service package group, each service package group including at least one service package, each of the service packages including at least one service identification and/or service Specific parameters.

In practical applications, the functional entities that control the service resources may be different for different services. The following takes the multicast service as an example to describe that the P-CSCF obtains a list of available resources from the entity that controls the multicast service resources and completes The process of multicast service resource authorization control.

In the second embodiment of the present invention, in the multicast service, the manner in which the SCF sends a list of available resources to the P-SCSF through a message is described in detail. Specifically, after receiving the request message that the IPTV UE accesses a certain multicast service, the SCF sends a multicast service list that the user can access to the P-type when returning the response message of the request message for the IPTV UE to access the multicast service. The CS-CFF obtains the multicast service list information that is accessible to the user from the response message and stores the information, and performs access authorization or access rejection on the user's request according to the obtained user-accessible multicast service list information. The available resource information is explicitly or implicitly included in the available multicast service list information. For example, the available multicast resource list information includes the available resource information of each multicast service, that is, the available resource information is explicitly carried; or, for example, the P-CSCF locally sets the correspondence between the multicast service identifier and the available resource information, That is, the available multicast service list information has implicitly included the available resource information; or, for example, a combination of the above two methods, that is, the multicast service list information includes available resource information of each multicast service, and the P-CSCF local setting Between the multicast service identity and the available resource information Correspondence.

Referring to FIG. 4, the method for implementing service resource authorization control in this embodiment includes the following steps:

Step s401: The IPTV UE sends an INVITE request message for accessing the multicast service or the multicast service packet to the SCF. The INVITE request message is not directly and end-to-end and will be processed by the entity that the request crosses. That is, the INVITE request message is sent by the IPTV UE, processed by the P-CSCF and the S-CSCF, and then forwarded to the SCF.

Step s402: When returning the response message to the INVITE request message of the IPTV UE, the SCF simultaneously delivers the multicast service list information accessible by the user to the P-CSCF. In this step, the SCF needs to deliver the multicast service list information that the user can access in the response message. The specific form of the multicast service list information that can be accessed by the user may be a header field mode or a specified message body mode, for example, a multicast service list information that can be carried in a header domain manner or a multicast service carried in a specified message body manner. List information.

Step s403: The P-CSCF obtains the multicast service list information accessible by the user from the response message returned by the SCF.

Step s404: The IPTV UE sends an acknowledgement ACK message to the SCF.

Step s405: The IPTV UE sends a request for accessing the multicast service data to the P-CSCF/access network.

Step s406: The P-CSCF/access network authorizes or denies the resource requested by the user according to the multicast service list information accessible by the user.

Step s407: The P-CSCF/access network sends a response requesting access to the IPTV UE. In the above steps, the resource authorization control of the multicast service is implemented by the SCF delivering the multicast service list information accessible by the user. Considering that the SCF should deliver the resource authorization list according to the capabilities of the entity such as the P-CSCF, the P-CSCF entity and the UE can report the capability to the SCF in advance as follows:

The UE sends its own capability information in the INVITE request message, and the P-CSCF reports its capability information when forwarding the INVITE request message of the IPTV UE. The specific steps are as follows:

A. Define a new capability tag Option Tag, such as resource-auth-list, UE, The P-CSCF carries the Option Tag through the Supported, Require, and other header fields, indicating that the SCF supports the resource authorization list.

B. The UE and the P-CSCF indicate that the SIP resource header (for example, P-Batch-Resource-Auth) is used to deliver the resource authorization list by using the header field.

C. The UE and the P-CSCF indicate that the resource authorization list is delivered by using the specified message body mode by carrying the message body type information (for example: Accept-Content: application/resource-auth-list).

In the above manner, when the SCF detects that the UE, the P-CSCF, and the like support or needs to send the user-accessible multicast service list information in a specified or unspecified manner, the SCF needs to pass an appropriate signaling message (such as INVITE or 200). The OK response message) and the way (the ^ port passes the P-Batch-Resource-Auth header i or the mode or the application/resource-auth-list message body mode) delivers the resource 4 authorized list.

The following describes in detail the different manners used by the SCF to deliver the multicast service list information accessible by the user in step s402.

Method 1: Send by link.

Specifically, as in the 200 OK response message, carrying a location link (such as an HTTP link) of the available multicast service list of the user, the entity such as the P-CSCF can obtain the available resource list from the specified location by using the corresponding protocol procedure. . Such as:

P-Batch-Resource-Auth:

Http://bc-service.example.com/userl-data.xml

Wherein P-Batch-Resource-Auth header field carries authorization of access to resources link position "http://bc-service.example.com/userl-data.xml", available resources, bad table ¹ J. When the entity such as the P-CSCF receives the above 200 OK response message, it acquires the user's resource authorization information from the specified location through the HTTP protocol and completes the resource authorization control locally.

Method 2: Delivered by direct delivery.

Specifically, in the 200 OK response message, the complete content of the multicast service list available to the user is carried, and the entity such as the P-CSCF can use the available multicast service list for resource authorization control. As in the 200 OK response message, carry the following: SIP/2.0 200 OK

Content- Type: application/resource-auth-list

Content-Length: (...)

<package name="example-package4";

Service-desc="only-listed-entries">

</package>

<package name="example-package5";

Service-desc="all-but-excluding-listed-entries">

</package> where the message body type is application/resource-auth-list , indicating that it is carrying a resource authorization list. In the content of the message body, the "name" parameter of the "package" tag describes the package to which the user has access rights. "service-desc" (Service Description, service description) describes the meaning of the subtag "entry", and "service" "The tag cooperation describes the user's permissions, which will be described in detail later.

After receiving the 200 OK response message, the entity such as the P-CSCF performs the resource authorization control locally according to the multicast service list information accessible by the user in the 200 OK response message. Regardless of which of the above methods is used, a list of available resources is finally required. The list of available resources is a detailed description of the multicast service or available resources that the user can access. The link http://bc-service.example.com/userl-data.xml in the above manner 1 and the message body in the second mode can be There are many ways to describe them. Here are two different ways.

(1) A description of the multicast service resource list, which describes the specific parameters of the multicast service.

Specifically, the following description can be used:

Content- Type: application/resource-auth-list

Content-Length: (...)

<media type="RTP/AVP/audio",

Maddr="225.1.2.3", mport=" 10000", codec="PCMU/8000", pt="0'7>

<media type="RTP/AVP/video",

Maddr="225.1.2.3", mport=" 10002", codec="H264/8000", pt="34'7>

</service>

Specifically, the "service" tag is used to describe the specific content of the available service, where the "name" attribute indicates the target i of the available service for identifying or referring to a specific multicast service, the example port is "sip:movie" "ltv.topway.com.cn", "media" tag is used for the media information of the multicast service, where "type" indicates the multicast service type, and "RTP/AVP/audio" indicates the use of the RTP audio and video protocol. Audio, "maddr" means multicast group address, here is "225.1.2.3", "mport" means port, for example "10000", "codec" is encoding, for example "PCMU/8000", "pt" is Payload type.

(2) The description method of the multicast service resource list is based on the identification mode of the available multicast groups one by one.

Since the multicast service deployment itself requires the cooperation of the P-CSCF to implement the related multicast service, if the P-CSCF can locally understand the multicast identity (or other identifiers that the P-CSCF can understand) and the controlled multicast group. The SCF can then send only the multicast identifiers available to the user to the P-CSCF. The P-CSCF determines the multicast group information that the user can join according to the available multicast identifiers of the user. Such as: Content- Type: application/resource-auth-list

Content-Length: (...)

(3) The description mode of the multicast service resource list is three, and the accessible multicast service information is sent according to the package.

A multicast service package contains zero or more multicast services. Users can sign up for each multicast service in each package one by one or further. Therefore, the SCF can deliver the multicast service information accessible by the user to the P-CSCF according to the packet. For each packet, you can specify to include only certain multicast services specified, all multicast services except certain specified multicast services, all multicast services, default multicast services, and so on. Such as:

Content- Type: application/resource-auth-list

</package> The package tag is used to describe the service package that the user has access to. The name attribute is used to indicate which package the user has subscribed to. The multicast service description method service-desc is used to specify the specific user to access. Broadcast business information, Service-desc can be:

1, all-entries: The user has access to all multicast services in the package;

2. as-default: Indicates that the access control mode is controlled according to the default permission. For this case, entities such as P-CSCF should have locally configured default access rights for each package;

3. Empty: Explain as if-default when the service-desc tag is not carried. 4. only-listed-entries: The user only has access rights to the multicast service listed in the entry tag.

5. all-but-excluding-listed-entries: The user has access rights to all multicast services except the multicast service listed in the entry tag in the access packet;

6. default-with-exception: On the default privilege access control mode, the multicast multicast service listed in the in-entry tag and the multicast service listed in the out-entry are excluded.

For the third and sixth cases, entities such as P-CSCF should have configured the default access rights for each package locally;

(4) The description method of the multicast service resource list is four, and the accessible multicast service information is sent according to the package-set.

Further, since most users may even sign the same package, or converge to some of the same contracted packages, one or more package sets "package-set" may be configured in the P-CSCF, and the SCF may be based on Package-set increases or decreases some package or multicast services. As follows:

Content- Type: application/resource-auth-list

<package-set name="package-set- 1 "/>

<package-set name="package-set-2">

</package>

</package-set>

The "name" attribute in the "package-set" tag describes the name of the packet set that the user can access. Therefore, the user may have all the default packets and multicast services in one or more packet sets, and may remove one or more packets from a certain packet set, or according to the description manner of the foregoing multicast service resource list. The method provides a more detailed description of the package.

In the second embodiment, the INVITE process is used between the SCF and the P-CSCF to obtain a list of resources that the user can access. In addition to using the INVITE process, you can also use the SUBSCRIBE / NOTIFY method to get a list of resources that you can access.

In the third embodiment of the present invention, the multicast service authorization control method includes the following steps: When the SCF receives the request message for accessing a certain multicast service initiated by the IPTV UE, the SCF returns to access the IPTV UE. The response message of the request message. After receiving the response message, the IPTV UE sends an ACK confirmation message to the SCF. The P-CSCF sends a SUBSCRIBE subscription message to the SCF to subscribe to the list of available resources. After receiving the SUBSCRIBE subscription message, the SCF sends a 200 OK response message to the P-CSCF, and sends a NOTIFY notification message to the P-CSCF to notify the available resource list. The P-CSCF obtains the available resource list information accessible by the user from the NOTIFY notification message, and performs user access authorization or access rejection according to the obtained user available resource list information.

Referring to FIG. 5, this embodiment includes the following steps:

Step s501: The IPTV UE initiates an INVITE request message for accessing the multicast service to the SCF.

Step s502: After receiving the INVITE request message, the SCF sends a 200 OK response message to the IPTV UE.

Step s503, the IPTV UE sends an ACK to the SCF after receiving the 200 OK response message. Message.

Step s504: The P-CSCF sends a SUBSCRIBE subscription message to the SCF to subscribe to the list of available resources.

The event header field of the SUBSCRIBE subscription message carries an event type indicating that the requested resource list is requested (for example: "resource-auth-list"), and optionally, the aor parameter is used to obtain a list of available resources of the specified user; if the subscription message is not It belongs to the SIP dialog Dialog created by the request message but needs to obtain the list of available resources that the session established by the request message can access (the P-CSCF as the Proxy cannot be used as the UA (User Agent) to initiate the request in the Dialog to which the request message belongs. However, the request message session needs to be controlled. Further, the SIP session identifier (for example, Call-ID, From-tag, and To-tag) is carried in the Event header field to indicate that the list of available resources related to the SIP session corresponding to the session identifier needs to be obtained. .

Step s505: After receiving the SUBSCRIBE subscription message, the SCF sends a 200 OK response message to the P-CSCF.

Step s506: The SCF sends a NOTIFY notification message to the P-CSCF to notify the P-CSCF of the list of available resources subscribed. For the delivery mode of the available resource list in the NOTIFY notification message and the specific content, refer to the manner in which the 200 OK response message is sent in the second embodiment and the specific description of the content included in the description, and no repeated description is provided herein.

Step s507: The P-CSCF obtains, from the NOTIFY notification message, information that the user can access the available resource list.

Step s508: After obtaining the available resource list information, the P-CSCF sends a 200 OK response message to the SCF.

Step s509: The IPTV UE sends a request for accessing the multicast service data to the P-CSCF/access network.

Step s510: The P-CSCF/access network authorizes or rejects the resource requested by the IPTV UE according to the available resource list.

Step s511: The P-CSCF/access network sends a response to the IPTV UE requesting access to the multicast service data.

In the above embodiment, the P-CSCF subscribes to the SCF for available resource list information because the user The available service information may implicitly or explicitly contain available resource information, so the alternate P-CSCF may subscribe to the SCF for available service list information. A specific implementation method for the P-CSCF to subscribe to the available service list information to the SCF and the SCF to return the available list information to the P-CSCF is exemplified by the above-mentioned embodiments as a reference, and therefore no further details are provided herein.

Through the method described in this embodiment, a resource list or a service list that can be accessed by the subscription (SUBSCRIBE) / notification (NOTIFY) between the P-SCSF and the SCF is implemented. In the above process, after the INVITE session is established, the SUBSCRIBE/NOTIFY subscription/notification process can be performed independently at any stage of the INVITE session, or even independently of the INVITE.

In the foregoing embodiment 2 and the third embodiment, an INVITE process or a subscription (SUBSCRIBE)/notification ( NOTIFY) process is used between the SCF and the P-CSCF, and the P-CSCF obtains a list of resources that the user can access. After obtaining the resource list information that the user can access, the P-CSCF needs to parse and process the available resource list information. For example, the available resource list information includes a multicast service identifier, a multicast service packet identifier, or a multicast service packet set. And the P-CSCF does not have a corresponding relationship between the specific parameters of the multicast service and the specific parameters of the multicast service. Therefore, the P-CSCF needs to be obtained from other servers in the network; or, when the link is delivered, the P-CSCF needs to obtain the link. Location Get a list of available resources.

In the fourth embodiment of the present invention, the SCF sends a message including specific parameters of the initially established or modified initial multicast service to the UE or the P-CSCF. The initial multicast service is a multicast service that is determined by the SCF or suggested to the UE to be accessed first after the service is established or modified. The initial multicast service may be a multicast service initiated by the UE, or the modification request is a specified multicast service, or is performed by the SCF. The message is determined according to the user data configuration, the local policy, and the like. The message including the specific parameter of the initial multicast service that is currently established or modified is a session establishment request or response message sent by the SCF to the UE, or a session sent by the SCF to the UE. Modify the request or response message, or any other message sent by the SCF to the UE or P-CSCF. When the message including the specific parameter of the currently established or modified initial multicast service is sent by the SCF to the UE, the message including the specific parameter of the currently established or modified initial multicast service passes through the P-CSCF and is P-CSCF. CSCF is eventually routed to the UE, so The P-CSCF may obtain specific parameters of the initial multicast service, including the resource authorization information, the identifier of the initial multicast service, and the processing of the message including the specific parameters of the initially established or modified initial multicast service. / or network parameters and other information.

Referring to Figure 6, this embodiment includes the following steps:

Step s601: The IPTV UE sends an INVITE request message for accessing the multicast service to the SCF.

Step s602: After receiving the INVITE request message, the SCF sends a 200 OK response message to the IPTV UE, where the 200 OK response message carries specific parameters of the initial multicast service, and may also include available resource list information. The specific parameters of the initial multicast service include information such as resource authorization information and an identifier of the initial multicast service.

The 200 OK response message is processed by the P-CSCF and finally routed to the UE by the P-CSCF. Therefore, the P-CSCF can obtain the specific parameters of the initial multicast service when processing the 200 OK response message, and quickly complete the use of the network for the user. The resource accesses the multicast service content for authorization.

If the 200 OK response message includes the available resource list information and is delivered by the link, the P-CSCF needs to obtain the available resource list from the link location. In this case, the P-CSCF may forward the 200 OK response message to the UE. And obtaining a list of available resources according to the link address; or the P-CSCF obtains the list of available resources according to the link address and after the processing or the successful list of available resources is completed, the 200 OK response message is forwarded to the UE.

If the 200 OK response message includes the available resource list information, the available resource list information includes a multicast service identifier, a multicast service packet identifier, or a multicast service packet set, and the P-CSCF does not have the identifier and the multicast service locally. Corresponding relationship between specific parameters. In this case, the P-CSCF may forward the 200 OK response message to the UE, and then according to other servers in the network (for example, to save the multicast service identifier or the multicast service packet identifier) The server corresponding to the specific multicast service and the specific parameters of the multicast service) obtains the correspondence between the identifier and the specific parameters of the multicast service; or, the P-CSCF first obtains the identifier and the other server from the network. Corresponding relationship between specific parameters of the broadcast service, after the acquisition is completed or successful, the 200 OK response message is forwarded to the UE. The specific parameters of the initially established multicast service in the 200 OK response message may be described and carried by using an SDP, such as:

SIP/2.0 200 OK

Content- Type: application/SDP

Content-Length: (...) v=0

o=scf 2890844526 2890842807 IN IP4 10.47.16.5

s=BC service

i=Current-BC: sip: bc-service 1 @example . com

c=IN IP4 224.2.17.12

b=CT: 120

t=0 0

a=sendonly

m=audio 49170 RTP/AVP 0

m=video 51372 RTP/AVP 99

a=rtpmap:99 h263-1998/90000

In the above example, the "i=" carries the identifier of the initial multicast service, and the "c=" line describes the content distribution method of the multicast service (using IPv4 multicast and the multicast address is 224.2.17.12), "i=" The identifier carrying the initial multicast service, "b=,, carrying the bandwidth requirement of the initial multicast service, "m=,, and "a=" line jointly describe the multicast port of the initial multicast service, and the compilation of the multicast service. Part of the information such as the decoding method and the relevant parameters required for the corresponding codec.

In addition to the specific parameters of the initial multicast service carried by the SDP, other methods can be used.

Step s603: After receiving the 200 OK response message, the IPTV UE sends an ACK message to the SCF.

Step s604: The IPTV UE sends a request for accessing the multicast service data to the P-CSCF/access network.

Step s605, the P-CSCF/access network according to the initial multicast service carried in the sX02 The specific content authorizes or denies the resource requested by the IPTV UE.

Step s606: The P-CSCF/access network sends a response to the IPTV UE requesting access to the multicast service data.

Step s607, s607, if the s602 does not carry the available resource list information, the P-CSCF uses the method described in the third embodiment to obtain the available resource list information or the available service list information by using a subscription/notification process or the like, such as an example. The three steps S504 to S508 acquire available resource list information or available service list information. The user requests a service switch during the process of using the multicast service, such as a user requesting to switch the LTV channel, then:

Step s608: The IPTV UE sends a request for accessing the multicast service data to the P-CSCF/access network.

Step s609: If the P-CSCF/access network has obtained the available resource list, the P-CSCF authorizes or rejects the resource requested by the IPTV UE according to whether the user is allowed to access the target multicast service in the available resource list. If the P-CSCF does not get a list of available resources, the P-CSCF may process and authorize or reject the resources requested by the IPTV UE according to local configuration and the like.

Step s610: The P-CSCF/access network sends a response to the IPTV UE requesting access to the multicast service data.

Through the method described in this embodiment, a resource list or a service list that can be accessed in the multicast service mode is obtained.

In the foregoing embodiment, the specific implementation process of carrying the specific content of the currently established multicast service in the initial service establishment process of the IPTV UE is described in detail. It is not difficult for a person skilled in the art to derive the service initiated by the IPTV UE according to the foregoing embodiment. The modification process, the initial service establishment process initiated by the IPTV SCF, and the service modification process and other possible service processes, the specific business process and implementation scheme for delivering the current multicast service specific content and/or the P-CSCF obtaining the available resource list. By using the business resources described in the second embodiment, the third embodiment and the fourth embodiment The authorization control method, in the multicast service of the IMS-based IPTV, implements the function of the SCF to deliver the user-available resource list. In this way, the entity such as the P-CSCF can obtain the user-related resource list in time. It provides a complete solution for the UE to cooperate with the P-CSCF and the access network to quickly complete resource access. In the above embodiment, the multicast service is taken as an example, and the flow and specific implementation manner of the multicast service resource authorization control method are described. The functional entity that controls the other resources in the actual application may use the same method in the foregoing embodiment to obtain the available resource list from the entity that performs the service control, thereby completing the service resource authorization control. The service control entity can use the same processing method as the SCF in the above embodiment. For example, for the access resource access control sub-network, the available resource list can be obtained from the application server AS that provides other service functions to complete the service resource authorization control, and the resource authorization control mode for other services is not repeatedly described herein.

The embodiment of the present invention further provides a system for implementing service resource authorization control, as shown in FIG. 7, including at least one user terminal 10, a proxy call session control function entity (P-CSCF) 20, and a service control function entity (SCF). ) 30, of which.

The user terminal 10 is configured to send a request for using the resources in the network to the service control function entity 30, and send the capability information of the device to the service control function entity 30, so that the network side service control function entity 30 performs available resources according to the capability information. The selection of the manner of sending the list information, the request for using the resources in the network may be a service access request message or a request message modified by the service.

The proxy call session control function entity 20 is configured to perform authorization control on the request of the user terminal 10 to use the network resource according to the available resource list information sent by the service control function entity 30.

The service control function entity 30 is configured to receive a request of the user terminal 10 to use the network resource, and send a message including the available resource list information to the proxy call session control function entity 20.

The message including the available resource list information may be: a response message sent by the service control function entity 30 to the proxy call session control function entity 20 when receiving the service access request message or the service modified request message sent by the user terminal 10. Or the service control function entity 30 sends a service establishment request or service repair to the user terminal 10. The change request message; or the notification message returned by the service control function entity 30 to the proxy call session control function entity 20 after receiving the subscription message sent by the proxy call session control function entity 20. The service control function entity 30 may send the list of available resources of the user terminal 10 in the above messages to implement the acquisition of the list of available resources by the proxy call session control function entity 20. In a specific sending manner, an access address (link address) of the available resource list may be carried in the sent message including the available resource list information, and the proxy call session control function entity 20 obtains the available resource list for the service according to the access address. The authorization control of the resource; or the complete content of the list of available resources is carried in the message including the available resource list information, and the proxy call session control function entity 20 can use the available resource list for authorization control of the service resource. Specifically, as shown in FIG. 7, the user terminal 10 further includes:

The request sending module 11 is configured to send a request for using the resources in the network to the service control function entity 30.

The terminal capability sending module 12 is configured to send the capability information of the device to the service control function entity 30, so that the service control function entity 30 selects the sending mode of the available resource list information. The capability information may be carried in a request message sent by the user terminal.

Specifically, the proxy call session control function entity 20 further includes:

The resource list obtaining module 21 is configured to obtain the available resource list information carried in the message sent by the service control function entity 30. The message may be a 200 OK response message or a NOTIFY notification message sent by the service control function entity 30, for example: the 200 OK response message is a request for the service access function entity 30 to receive the service access request message or the service modification sent by the user terminal 10. The message is sent to the proxy call session control function entity 20, and the request message is a service control function entity 30 sends a service establishment request or a service modification request message to the user terminal 10; the NOTIFY notification is the service control function entity 30. The notification message returned to the proxy call session control function entity 20 after receiving the subscription message sent by the proxy call session control function entity 20. .

The resource list storage module 22 is connected to the resource list obtaining module 21 and configured to store the available resource list information acquired by the resource list obtaining module 21. The authorization control module 23 is connected to the resource list storage module 22, and is configured to perform authorization control on the request of the user to access the network resource according to the available resource list information stored by the resource list storage module 22.

In addition, the proxy call session control function entity 20 further includes a capability information sending module 24, configured to send the capability information of the device to the service control function entity 30, so that the service control function entity 30 selects a manner of transmitting the available resource list information. .

Specifically, the service control function entity 30 further includes:

The terminal resource list obtaining module 31 is configured to obtain the available resource list information of the user terminal 10, where the obtaining method is to obtain the available resource list information of the user from the entity that stores the service configuration file, such as the UPSF entity in the network, and the timing may be used. The way to get it or the way it gets in real time when needed.

The resource list sending module 32 is connected to the terminal resource list obtaining module 31, and configured to send the available resource list information acquired by the terminal resource list obtaining module 31 to the proxy call session control function entity 20 by using a 200 OK response message or a NOTIFY notification message. The available resource list information is used to delegate the authorization control of the user terminal request by the call session control function entity 20.

In addition, the service control function entity 30 further includes a resource list setting module 33 for setting the manner in which the resource list sending module 32 transmits the available resource list information according to the capability information sent by the receiving agent call session control function entity 20 and the user terminal 10.

By using the system described in the foregoing embodiment, the function of the SCF (ie, the service control function entity 30) to deliver the available resource list information (such as the available multicast service list) is implemented. In this manner, the P-CSCF (ie, the proxy) The call session control function entity 20) and the like can acquire the user-related resource list in time. It provides a complete solution for the UE to cooperate with the P-CSCF and the access network to quickly complete resource access.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by hardware, or can be implemented by means of software plus necessary general hardware platform, and the technical solution of the present invention. It can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including a number of instructions for making a A computer device (which may be a personal computer, server, or network device, etc.) performs the methods described in various embodiments of the present invention.

In conclusion, the above description is only a preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

Rights request

A method for controlling a service resource authorization, comprising: a proxy call session control function entity receiving a message including a list of available resource information sent by a service control entity;

The method for controlling the service resource authorization according to claim 1, wherein the proxy call session control function entity further includes the following steps before receiving the message including the available resource list information sent by the service control entity:

The service control entity obtains the available resource list information of the user terminal in real time or periodically.

The method for controlling the service resource authorization according to claim 1, wherein the proxy call session control function entity acquires the available resource list information carried in the message, and uses the available resource list information to the user terminal. The authorization control using the resource request specifically includes:

The proxy call session control function entity acquires a specific parameter of the initial multicast service that is currently established or modified in the message, and the proxy call session control function entity performs authorization control on the request of the user terminal to use the resource according to the specific parameter. .

The method for controlling the service resource authorization according to claim 1, wherein the message including the available resource list information specifically includes:

The access address of the list of available resources; or a complete list of available resources.

The method for controlling the service resource authorization according to claim 4, wherein when the message including the available resource list information includes the access address of the available resource list, the proxy call session control function entity receives the service control After the entity sends a message including the available resource list information, it also includes:

The proxy call session control function entity acquires the available resource list according to the access address.

The method for controlling the service resource authorization according to claim 4 or 5, wherein the specific content of the available resource list information is at least one of the following: including at least one service identifier and/or specific service Parameter; or

Including at least one business identifier; or

Include at least one service package, each service package including at least one service identifier and/or specific parameters of the service; or

The at least one service package group is included, and each service package group includes at least one service package, and each of the service packages includes at least one service identifier and/or specific parameters of the service.

The method for controlling the service resource authorization according to claim 1, wherein the step of the proxy call session control function entity receiving the message including the available resource list information sent by the service control entity is specifically:

The proxy call session control function entity forwards a request message of the user terminal to the service control entity;

The proxy call session control function entity receives a response message returned by the service control entity, and the response message carries the available resource list information.

The method for controlling the service resource authorization according to claim 7, wherein the request message includes sending the available resource list information supported by the user terminal and/or the proxy call session control function entity. The method is used for the service control entity to select a manner of sending the available resource list information.

The service resource authorization control method according to claim 7, wherein the response message carrying the available resource list information is specifically:

The response message carries available multicast service list information, and the available service list information is explicitly or implicitly included in the multicast service list information.

The proxy call session control function entity sends a subscription message to the service control entity;

The proxy call session control function entity receives from the service control entity a notification message, the notification message carrying the available resource list information.

The method for controlling the service resource authorization according to claim 10, wherein the subscription message includes a manner of sending the available resource list information supported by the proxy call session control function entity for the service The control entity selects the manner in which the available resource list information is sent.

12. A system for implementing authorization control of a service resource, comprising a proxy call session control function entity and a service control function entity, wherein:

The proxy call session control function entity is configured to perform authorization control on the request of the user terminal to use the network resource according to the available resource list information sent by the service control function entity;

The service control function entity is configured to receive a request from the user terminal to use a network resource, and send a message including the available resource list information to the proxy call session control function entity.

The system for implementing the service resource authorization control according to claim 12, wherein the proxy call session control function entity further comprises:

a resource list obtaining module, configured to obtain the available resource list information carried in the message sent by the service control function entity;

The system for implementing the service resource authorization control according to claim 13, wherein the proxy call session control function entity further comprises:

The capability information sending module is configured to send the capability information of the proxy call session control function entity to the service control function entity, so that the service control function entity selects the mode of sending the available resource list information.

The system for implementing the service resource authorization control according to claim 12, wherein the service control function entity further comprises:

a terminal resource list obtaining module, configured to acquire a list of available resources of the user terminal Interest rate

And a resource list sending module, configured to send, by the terminal resource list, the obtained available resource list information of the user terminal to the proxy call session control function entity.

The system for implementing the service resource authorization control according to claim 15, wherein the service control function entity further includes:

The resource list setting module is configured to set a sending manner of the available resource list information according to the received proxy call session control function entity and the capability information sent by the user terminal.

A user terminal, configured to send a request for using a resource in a network to a network side, where the method includes:

a request sending module, configured to send a request for using a resource in the network to the service control function entity;

The terminal capability sending module is configured to send the capability information of the device to the service control function entity, so that the network side service control function entity performs the selection of the available resource list information sending manner.

18. A proxy call session control function entity, configured to perform service resource authorization control on a request of a user terminal, wherein:

19. The proxy call session control function entity of claim 18, further comprising:

20. A service control function entity, configured to call a conversation to an agent The control function entity sends the available resource list information to perform the authorization control of the service, and includes: a terminal resource list obtaining module, configured to acquire the available resource list information of the user terminal;

21. The service control function entity of claim 20, further comprising: